Bespoke Dental Lounge

Privacy Policy

Last updated: 15 August 2026

This policy explains how we handle your personal information when you use this website (smile.bespokedentallounge.co.uk) to enquire about or book an Invisalign consultation.

This site is separate from our main practice website. If you're looking for the privacy policy covering www.bespokedentallounge.co.uk, you'll find it there.

Who we are

Bespoke Dental Lounge Ltd is the data controller for the information collected through this site. That means we decide what information is collected and what happens to it.

  • Address: 95-97 South Street, Dorking, Surrey, RH4 2JU
  • Phone: 01306 889105
  • Email: contact@bespokedentallounge.co.uk
  • Company number: 11720696
  • ICO registration number: ZB185867

If you have a question about your information or want to exercise any of the rights below, contact us using those details.

What we collect

When you complete our enquiry form:

  • Your name, email address and phone number
  • What you'd like to change about your smile
  • Whether you've had orthodontic treatment before
  • Your age bracket
  • Whether you'd like to hear from us about offers and updates

When you book a consultation:

  • Your chosen appointment date and time
  • Payment details for the £40 deposit. These are handled directly by our payment provider. We never see or store your full card number

Automatically, when you use the site:

  • Technical information such as your IP address, device type, browser and how you move through the site, collected through cookies. See the Cookies section below

Some of this is health information. What you tell us about your teeth and what you'd like to change is health-related, and health data carries extra protection under UK data protection law. We treat it accordingly.

Why we use it, and our lawful basis

What we do
Respond to your enquiry and arrange your consultation
Lawful basis
Taking steps at your request before entering into a contract
What we do
Handle the health-related information you give us
Lawful basis
Your explicit consent, and the provision of healthcare under Article 9(2)(h) UK GDPR
What we do
Take and manage your £40 deposit
Lawful basis
Necessary for our contract with you
What we do
Send you offers and updates about treatment, if you've agreed
Lawful basis
Your consent, which you can withdraw at any time
What we do
Keep records of enquiries and appointments
Lawful basis
Our legitimate interest in running the practice, and our legal obligations
What we do
Measure how our advertising performs and improve the site
Lawful basis
Your consent, given through our cookie banner

Marketing

If you tick the box to hear from us, we may contact you by email or text with information about treatment, offers and updates.

You can stop this at any time by replying STOP to a text, using the unsubscribe link in an email, or contacting the practice. Withdrawing consent doesn't affect anything we did before you withdrew it, and it won't affect your appointment.

Cookies and similar technologies

When you first arrive you'll see a cookie banner. Our own analytics and advertising tags are held back until you choose. Our booking system, which is provided by a third party, sets a small number of cookies when the page loads. Most of these keep the enquiry and booking forms working. A few are used by that provider for its own analytics, and we are working with them to restrict these until consent is given.

Our Cookie Policy (opens in a new tab) lists every cookie used on this site, what each one is for, who provides it and how long it lasts. It is kept up to date automatically. You can also change or withdraw your cookie choices there at any time.

We also use the Meta Conversions API, which sends information about actions you take on this site directly from our systems to Meta. This only happens if you've accepted marketing cookies.

Who we share your information with

We use trusted providers to run this site. They act on our instructions under contract and only for the purposes above. We do not sell your information.

Provider
GoHighLevel (HighLevel Inc.)
What they do
Our booking system, CRM and patient messaging
Where they process it
United States
Provider
Vercel
What they do
Hosts this website
Where they process it
United States company, served from London
Provider
Stripe
What they do
Processes the £40 deposit
Where they process it
United States / EU
Provider
Google
What they do
Analytics, tag management and the map on our thank-you page
Where they process it
United States
Provider
Meta
What they do
Advertising measurement
Where they process it
United States
Provider
Stape
What they do
Our server-side tagging service
Where they process it
United Kingdom
Provider
Bunny (BunnyWay d.o.o.)
What they do
Hosts the video on this site
Where they process it
Slovenia, EU
Provider
Cloudflare
What they do
Bot protection on our forms
Where they process it
United States
Provider
Usercentrics (Cookiebot)
What they do
Manages your cookie choices
Where they process it
Ireland / EU
Provider
Oceanhouse Solutions Ltd
What they do
Our marketing agency, who build and run this site on our behalf
Where they process it
United Kingdom

We may also share information where the law requires it, or to establish or defend legal claims.

International transfers. Some of these providers process information outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Addendum to the standard contractual clauses.

How long we keep it

How long we keep your information varies according to why we are processing it. We keep it only for as long as is necessary for that purpose, and where the law requires us to hold certain records for a minimum period, we do so.

In practice that means enquiries which don't lead to an appointment are kept only as long as needed to deal with them and for a reasonable period afterwards. If you become a patient, your records are kept in line with the practice's dental records retention policy and our obligations under NHS and CQC guidance. Where we rely on your consent, for example for marketing, we keep a record of that consent until you withdraw it.

Your rights

Under UK data protection law you have the right to:

  • Be told how your information is used
  • Get a copy of the information we hold about you
  • Have inaccurate information corrected
  • Ask us to delete information, in certain circumstances
  • Ask us to restrict how we use it, in certain circumstances
  • Object to us using it, including for direct marketing
  • Ask for it in a portable format
  • Withdraw consent at any time, where we rely on consent

To do any of these, contact us using the details at the top. We'll respond within one month, though we may extend that by two months for complex requests and will tell you if we do.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd ask you to come to us first so we have a chance to put it right.

Keeping your information secure

We take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. Payment details are handled entirely by our payment provider and never reach our systems.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

Bespoke Dental Lounge Ltd, 95-97 South Street, Dorking, Surrey, RH4 2JU. 01306 889105. contact@bespokedentallounge.co.uk